PRIVACY AND DATA PROTECTION POLICY

1. GENERAL INFORMATION

The purpose of this “Privacy and Data Protection Policy” is to inform you of the conditions governing the collection and processing of your personal data by our entity or corporate group in order to safeguard your fundamental rights, honour and freedoms, all in compliance with current regulations governing the Protection of Personal Data according to the European Union and the Spanish Member State.

In accordance with these regulations, we need your authorization and consent for the collection and processing of your personal data, so below we provide you with all the details of your interest regarding how we carry out these processes, for what purposes, which other entities may have access to your data and what your rights are.

For all the above reasons, once you have reviewed and read our Data Protection Policy, it is essential that you accept it as proof of your conformity and consent.

2. DATA CONTROLLER

Who collects and processes your data?

The Data Controller is the natural or legal person, public or private in nature, or administrative body, who alone or jointly with others determines the purposes and means of the processing of personal data; in the event that the purposes and means of processing are determined by European Union or Spanish Member State law.

In this case, our data identifying as Data Controller are the following:
Nasal Advanced Systems of Airflow Lab, S.L- CIFB85545523

How can you contact us?

Address of our offices:

Postal address:

Fortunata y Jacinta Nº 23 1º C. 28020, Madrid (Madrid), Spain

Who can help you with our Data Protection Policy?

We have a person or entity specialized in data protection, which is responsible for ensuring proper compliance in our entity of the legislation and regulations in force. This person is known as the Data Protection Officer (DPO) and, if you need to, you can contact him in the following way:

3. SECURITY MEASURES

What do we do to ensure the privacy of your data?

Our entity or corporate group adopts the necessary organizational and technical measures to guarantee the security and privacy of your data, avoid its alteration, loss, treatment or unauthorized access, depending on the state of technology, the nature of the data stored and the risks to which they are exposed.

Among others, the following measures stand out:

To guarantee the confidentiality, integrity, availability and permanent resilience of the treatment systems and services.

Restore availability and access to personal data quickly in the event of a physical or technical incident.

Verify, evaluate and evaluate, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of processing.

Pseudonymize and encrypt personal data, in the case of sensitive data.

4. PURPOSE OF DATA PROCESSING

What do we want to process your data for?

We need your authorization and consent to collect and process your personal data, so below we detail the uses and intended purposes.

Website queries: Response to queries received through the electronic form on the website.

How long do we keep your data?

We use your data for as long as is strictly necessary to fulfil the purposes stated above. Unless there is a legal obligation or requirement, the planned storage periods are:

Website queries: For a period of 1 year from the last confirmation of interest.

5. LEGITIMISATION OF PROCESSING

Why do we process your data?

The collection and processing of your data is always legitimated by one or more legal bases, which are detailed below:

Website queries: Explicit consent of the interested party.

6. RECIPIENTS OF YOUR DATA

To whom do we transfer your data within the European Union?

We do not transfer your data to third parties or entities, unless legally obliged to do so.

Do we carry out International Transfers of your data outside the European Union?

We do not carry out international transfers of your data.

7. ORIGIN AND KIND OF DATA PROCESSED

Where did we get your data?

Website Enquiries:

Web contacts: The interested party or its legal representative.

What kind of data have we collected and processed from you?

Website Enquiries

Purposes:

Response to queries received through the electronic form on the website.

Web contacts:

Identifying data:

Name and Surname

E-mail address

Phone number

8. RIGHTS OF THE INTERESTED PARTIES

What rights do you have?

The data protection regulations in force protect you in a series of rights in relation to the use we give to your data. Each and every one of your rights are unipersonal and non-transferable, that is to say, they can only be carried out by the owner of the data, after verifying your identity.

The following is a list of your rights:

Request ACCESS to your personal data.

Request the RECTIFICATION of your data.

Request DELETION or deletion of your data (right to “forget”).

LIMIT or OPPOSE the use we make of your data.

Right to PORTABILITY of your data for cases of telecommunications services or Internet.

Right to WITHDRAW your consent at any time.

Right to lodge a CLAIM on data protection matters with the Supervisory Authority: Agencia Española de Protección de Datos

How can you exercise your rights in relation to your data?

To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of your consent, you can do so in the following way:

Website queries:

Responsible: Nasal Advanced Systems of Airflow Lab, S.L

Phone number: (+34) 915700401

E-mail: nasal@nasalsystems.es

Web site: https://nasalsystems.es/

How can you file a claim?

In addition to your rights, if you believe that your data is not being collected or processed in accordance with current Data Protection legislation, you may make a complaint to the Control Authority, whose contact details are indicated below:

Agencia Española de Protección de Datos

9. CONSENT AND ACCEPTANCE

Acceptance of this document indicates that you understand, accept all the clauses of our privacy policy so you authorize the collection and processing of your personal data in these terms. This acceptance is done by activating the “Read and Accept” checkbox of our Privacy Policy.

NASAL is a technology-based company that provides solutions for the medical healthcare field. It is made up of a multidisciplinary team of professionals who combine medical knowledge with the most advanced software development techniques.